Symantec Endpoint Encryption CVE-2017-13675 Denial-of-Service Vulnerability

Bugtraq ID:	101089
Class:	Design Error
CVE:	CVE-2017-13675
Remote:	Yes
Local:	Yes
Published:	Oct 09 2017 12:00AM
Updated:	Oct 23 2017 07:03PM
Credit:	Kyriakos Economou (@kyREcon) on behalf of Nettitude.
Vulnerable:	Symantec Endpoint Encryption 11.1.3 Symantec Endpoint Encryption 11.1.2 Symantec Endpoint Encryption 11.1.1 Symantec Endpoint Encryption 11.1 Symantec Endpoint Encryption 11.1.3 HF2 Symantec Endpoint Encryption 11.0
Not Vulnerable:	Symantec Endpoint Encryption 11.1.3 HF3

Symantec Endpoint Encryption CVE-2017-13675 Denial-of-Service Vulnerability

Symantec Endpoint Encryption is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause a resourced system to become unresponsive, resulting in a denial-of-service condition.

Versions prior to Symantec Endpoint Encryption 11.1.3HF3 are vulnerable.

Symantec Endpoint Encryption CVE-2017-13675 Denial-of-Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec Endpoint Encryption CVE-2017-13675 Denial-of-Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Symantec Endpoint Encryption CVE-2017-13675 Denial-of-Service Vulnerability

References:

• Symantec Endpoint Encryption - Homepage (Symantec)
  
• Symantec Homepage (Symantec)
  
• Security Advisories Relating to Symantec Products - Symantec Endpoint Encryption (Symantec)